Hackers pull off $133 million French bank heist via service provider
2026-11-08T13:23:21Z•bf84a7e9b1afc349a608c5393a07f4378089200803c7ea9dccb8eefbd65f6c5d
API secretsD-LinkGitHub malwareMFA bypassOT securityPlex2ShellQNAPSSL-VPNaccount takeoveractively exploited vulnerabilitybackdoorbank fraudcloud securitycredential theftcybersecurity newsdata breachindustrial control systemsinfostealernetwork appliancesphishingphishing-as-a-serviceransomwaresupply-chain compromisezero-day
What happened
A BleepingComputer security news feed covering major cyber incidents and vulnerabilities, including a $133 million bank heist through a service provider, actively exploited SonicWall SSL-VPN authentication bypass flaws, attacks against QNAP devices via Plex2Shell, exposed customer credentials and tokens at Chainalysis, zero-days in D-Link switches, phishing campaigns stealing cloud credentials and sessions, malware distributed through fake GitHub security tools, and attacks against industrial refrigeration systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- bf84a7e9b1afc349a608c5393a07f4378089200803c7ea9dccb8eefbd65f6c5d
- Enrichment time
- 2026-11-08T13:23:21Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.